
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier: X5NN/MnJX/k2/VWgPW+1A1QbDfKwjX1vlfv2aoFaSGE=
Subject key identifier: D1:44:13:BF:8A:F0:1B:D1:50:73:3A:BA:A8:C6:03:51:2F:9D:EB:7D
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number: 0202
Signing time: Sat 13 Jun 2026 03:18:18 +0000
Manifest this update: Sat 13 Jun 2026 03:18:18 +0000
Manifest next update: Sat 20 Jun 2026 03:18:18 +0000
Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: TzOKdaHxDRKDSPYt3DknXLHjl3Ov2MGkT2dvYVj2bCY=)
2: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: 9GGpKqMuP60pZTecgihCPtCUwjJQr1u5VITWHt4kvQc=)
3: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: 6r9HMe5N7O3EO/hoVyMLGjAo1zMWyRsh6cOTtVL/RMY=)
4: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: ZY1siwjbqnQaZCIx96bLhb0d0HA6YypX15NteDeXL0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Validity
Not Before: Jun 13 03:18:18 2026 GMT
Not After : Jun 20 03:18:18 2026 GMT
Subject: CN=6a2ccbfa-7a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:53:81:6f:b5:fb:33:90:da:4e:f0:7c:b0:
57:f3:6f:e2:40:39:d3:7a:54:68:2e:35:11:89:3b:
2f:26:b4:48:6b:4f:82:c6:fe:b5:59:9e:fa:4d:5f:
2a:ee:44:f5:98:81:fb:f1:3f:f5:27:25:3d:13:08:
2e:b6:e3:fc:c4:ed:47:2c:ee:03:84:90:81:f0:98:
f3:cf:95:b9:d1:d7:3a:58:86:98:89:00:82:30:ff:
d8:6d:3c:e8:98:ad:e9:ae:a8:f9:a4:dc:3d:ce:39:
c3:10:a6:7c:f1:4e:a9:94:9d:57:17:85:27:0a:eb:
a3:5d:a1:e7:2a:62:66:09:f6:24:82:cb:3c:6d:17:
4e:5b:9f:08:51:1a:00:36:f6:eb:92:7c:49:a3:56:
00:d0:0d:cf:2d:1d:9a:92:1f:de:d6:27:e4:21:97:
77:70:84:32:d8:da:52:82:b5:2d:ca:c0:05:85:1a:
b9:2a:96:70:ad:37:bb:f8:50:fc:7c:f9:81:de:cc:
1f:f3:7f:99:e2:78:2e:d6:f6:bf:46:22:49:66:a4:
3a:dd:b8:e8:d7:de:bf:d3:84:4c:4d:02:3b:ff:1c:
67:c9:b2:32:38:1b:a1:eb:84:f2:06:a7:60:2e:ae:
f5:35:4c:bb:4b:f7:ce:6a:fa:ce:02:e4:1e:0a:48:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:44:13:BF:8A:F0:1B:D1:50:73:3A:BA:A8:C6:03:51:2F:9D:EB:7D
X509v3 Authority Key Identifier:
keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:77:3f:c1:ff:65:06:1c:69:30:2b:be:ad:5e:1c:61:32:56:
aa:0e:d9:46:6b:63:5f:a7:83:c1:e4:60:b4:90:22:c8:5d:78:
92:06:16:bc:b9:8f:b4:b7:24:63:0c:7f:e5:94:58:4c:3e:71:
e6:de:af:90:15:d7:22:13:f6:84:2b:02:07:60:c5:51:fe:16:
36:1b:4f:59:1d:83:cf:34:d4:ab:42:ca:97:5b:69:b8:87:32:
68:a0:3a:07:2c:23:b5:8b:08:3b:32:b8:39:97:fe:54:f9:bf:
d3:00:84:7d:f1:8e:ae:2c:44:a8:d4:82:87:ef:ec:14:a5:56:
0e:37:09:0b:7e:a7:44:42:01:ab:85:4b:4d:3c:7c:39:55:75:
e2:be:38:f8:37:31:59:e1:ce:23:48:92:78:a6:01:04:30:a0:
55:eb:93:00:98:ef:0b:78:48:99:d8:50:1f:90:d6:d2:76:14:
98:0c:74:10:9d:ab:de:db:48:fe:59:37:be:11:b3:eb:a0:a0:
b3:81:69:27:99:24:63:32:fd:27:c1:f8:6d:ec:73:6b:d0:8f:
c2:e7:15:17:1f:33:35:9b:04:a6:f1:1d:5b:39:aa:47:f2:04:
67:c7:ef:0f:df:d1:04:8a:53:bb:6d:22:06:32:3c:2b:f4:76:
22:7c:75:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:56:19 2026 by rpki-client